$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa File: eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa (raw, json) Hash identifier: 60NxKSUvN/TToTaF6TKKbqBbkurnoLr4SZIU5QYR4Es= Subject key identifier: D2:2C:A1:2B:ED:91:E4:2F:33:D0:DE:4E:B9:DF:E9:D9:F7:05:E0:11 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584A82AB4773F80E21E62C6531E0 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 10384 IP address blocks: 152.87.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:47:73:f8:0e:21:e6:2c:65:31:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=415f1c28-e801-4409-9ea6-05b8bef1c71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:87:92:2e:af:bc:c9:ca:b2:fa:26:33:3a: d7:7d:77:26:2b:48:ab:c7:c6:f4:e2:90:5f:1d:4b: d9:29:11:d2:cb:be:f2:0d:82:f3:ce:d9:42:f9:37: bd:9a:ad:77:87:d7:82:c4:94:82:8e:9e:3c:a6:d1: b1:98:23:c7:b3:3e:99:d2:a9:83:22:36:bb:cf:57: 22:97:42:65:f2:5f:59:8d:70:d7:0c:7c:ba:69:5e: 74:86:c8:7b:53:34:39:ad:6a:71:db:cb:37:6a:95: fd:8c:7b:eb:ff:5a:c2:30:3b:ed:9d:26:22:39:82: 94:a3:b8:14:e7:d7:46:41:59:c8:d7:d8:8d:f2:ec: 0e:09:43:f4:68:9c:bb:2c:6f:0d:45:45:93:86:10: cb:83:6d:fb:0c:94:1c:44:7d:fd:dc:b2:a3:4d:95: 37:d3:7f:4e:73:0c:2f:24:d1:93:6e:64:35:87:f9: 48:04:66:fb:50:af:0e:aa:65:0e:cb:c3:3c:a5:97: 13:ca:ae:d2:94:83:3b:4d:8c:32:d9:90:d6:9f:2c: ac:e0:0c:34:eb:fa:98:db:5c:25:1a:c1:60:77:52: fb:4f:fd:23:ef:be:2d:f8:36:3c:5a:80:3b:a7:d2: 40:35:75:b9:60:02:9b:18:e8:57:15:49:0d:d9:b0: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2C:A1:2B:ED:91:E4:2F:33:D0:DE:4E:B9:DF:E9:D9:F7:05:E0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f5:45:be:69:20:da:04:3f:4a:3f:ea:c9:b3:f9:df:5b:c5: c8:d5:22:c1:f7:e2:38:3d:a8:c2:4f:d4:a4:c5:01:89:eb:06: de:33:27:dc:b2:86:61:47:75:50:ca:bb:29:48:f0:fb:55:c6: 97:35:63:58:34:52:85:f5:c3:82:d5:f8:5e:24:99:8d:f4:d4: 02:02:93:3d:b6:67:b0:96:55:47:79:e8:a7:d3:87:74:9d:b8: 25:48:cc:82:3c:b6:f5:3c:fb:89:58:de:dc:bd:29:24:8d:c0: 39:11:99:d4:11:d6:c4:f9:c3:ee:4f:e7:be:aa:63:07:22:73: 0c:49:15:13:ce:a8:55:9d:38:69:e9:61:c7:6b:75:37:e4:d9: 48:ea:85:8a:17:f8:7e:9c:9e:28:fc:8d:8e:fb:52:87:79:e3: 42:1d:f9:d4:a9:bb:54:f2:33:c0:1d:7f:c0:9f:de:79:71:4e: da:a5:36:37:6b:ee:7f:4d:28:1e:b5:58:9b:37:d6:fd:b5:8f: de:91:d2:ba:4c:ae:9b:7f:61:95:f6:66:c8:48:3b:67:d7:2e: 8a:c6:63:86:ea:34:d2:f5:dd:e6:ce:9a:d9:59:b1:94:14:4f: 93:81:84:61:a7:d7:6d:6a:b7:6b:98:fd:eb:47:87:df:b5:30: a5:7d:b0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0dz+A4h5ixlMeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk NDE1ZjFjMjgtZTgwMS00NDA5LTllYTYtMDViOGJlZjFjNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV+Hki6vvMnKsvomMzrXfXcmK0irx8b04pBf HUvZKRHSy77yDYLzztlC+Te9mq13h9eCxJSCjp48ptGxmCPHsz6Z0qmDIja7z1ci l0Jl8l9ZjXDXDHy6aV50hsh7UzQ5rWpx28s3apX9jHvr/1rCMDvtnSYiOYKUo7gU 59dGQVnI19iN8uwOCUP0aJy7LG8NRUWThhDLg237DJQcRH393LKjTZU3039Ocwwv JNGTbmQ1h/lIBGb7UK8OqmUOy8M8pZcTyq7SlIM7TYwy2ZDWnyys4Aw06/qY21wl GsFgd1L7T/0j774t+DY8WoA7p9JANXW5YAKbGOhXFUkN2bBRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIsoSvtkeQvM9DeTrnf6dn3BeARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvZWI3M2I0ZjMtMGQ4My0z NzI0LThmZmEtMTFkZGI1OWY4NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH1Rb5pINoEP0o/6smz+d9bxcjVIsH34jg9qMJP1KTFAYnrBt4zJ9yy hmFHdVDKuylI8PtVxpc1Y1g0UoX1w4LV+F4kmY301AICkz22Z7CWVUd56KfTh3Sd uCVIzII8tvU8+4lY3ty9KSSNwDkRmdQR1sT5w+5P576qYwcicwxJFRPOqFWdOGnp YcdrdTfk2UjqhYoX+H6cnij8jY77Uod540Id+dSpu1TyM8Adf8Cf3nlxTtqlNjdr 7n9NKB61WJs31v21j96R0rpMrpt/YZX2ZshIO2fXLorGY4bqNNL13ebOmtlZsZQU T5OBhGGn121qt2uY/etHh9+1MKV9sDI= -----END CERTIFICATE-----Generated at Wed Aug 13 09:46:39 2025 by rpki-client